REMARKS 



Claims 1-5, 7-28 and 30-33 are pending. Claims 1-5, 7-28 and 30-33 stand 
rejected. Independent Claims 1,12 and 23 have been amended. No new matter 
has been added. For example, support for the amendments to these claims can be 
found in the instant Application as filed at least at page 10 lines 12-17 and page 1 1 
line 15. 

35 U.S.C. 103 

Claims 1-5, 7-28 and 30-33 

Claims 1-5, 7-28 and 30-33 stand rejected under 35 U.S.C. 103(a) as being 
unpatentable over U.S. Patent Application Publication No. 2004/0148520 by Talpade 
et al. (referred to herein as "Talpade") in view of U.S. Patent Application Publication 
No. 2003/0208606 by Maguire et al. (referred to herein as "Maguire"). Applicant has 
reviewed the asserted art and respectfully submits that the asserted art does not 
teach or suggest Claims 1-5, 7-28 and 30-33 for at least the following reasons. 

"As reiterated by the Supreme Court in KSR, the framework for the objective 
analysis for determining obviousness under 35 U.S.C. 103 is stated in Graham v. John 
Deere Co., 383 U.S. 1, 148 USPQ 459 (1966). Obviousness is a question of law based 
on underlying factual inquiries" including "[ascertaining the differences between the 
claimed invention and the prior art" (MPEP 2141(11)). "In determining the differences 
between the prior art and the claims, the question under 35 U.S.C. 103 is not whether 
the differences themselves would have been obvious, but whether the claimed invention 
as a whole would have been obvious" (emphasis in original; MPEP 2141.02(1)). 

Applicant notes that "[t]he prior art reference (or references when combined) 
need not teach or suggest all the claim limitations, however, Office personnel must 
explain why the difference(s) between the prior art and the claimed invention would 
have been obvious to one of ordinary skill in the art " (emphasis added; MPEP 2141(111)). 
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Applicant respectfully submits that "[i]t is improper to combine references 
where the references teach away from their combination" (emphasis added; MPEP 
2145(X)(D)(2); In re Grasselli, 713 F.2d 731, 743, 218 USPQ 769, 779 (Fed. Cir. 
1983)). Applicant respectfully notes that "[a] prior art reference must be considered 
in its entirety, i.e., as a whole , including portions that would lead away from the 
claimed invention" (emphasis in original; MPEP 2141.02(VI); W.L. Gore & 
Associates, Inc. v. Garlock, Inc., 721 F.2d 1540, 220 USPQ 303 (Fed. Cir. 1983), 
cert, denied, 469 U.S. 851 (1984)). Further, "[a] reference will teach away if it 
suggests that the line of development flowing from the reference's disclosures is 
unlikely to be productive of the result sought by the applicant. In re Gurley, 31 
USPQ2d 1 130 (Fed. Cir. 1994)." Applicant respectfully submits that there is no 
motivation to combine the teachings of Talpade and Maguire, because both Talpade 
and Maguire teach away from the suggested modification. 

More specifically, Applicant respectfully submits that both Talpade and 
Maguire teach away from "wherein said remotely located computing resource is 
modified by said unauthorized intrusion," as recited by Claim 1. 

For example, Talpade states in the last sentence of 0002 (emphasis added), 
"More particularly, our invention relates to detecting DDoS attacks directed at 
edge/customer networks and to mitigating such attacks by redirecting the DDoS and 
non-DDoS traffic within a service providers network and then selectively removing 
the DDoS traffic before it reaches the edge/customer networks." 

Accordingly, Applicant understands Talpade to teach detecting attacks and 
removing the attacks from the traffic before the attacks reach the customer's network 
(see Talpade last sentence of 0002 quoted herein). 

Applicant respectfully submits that detecting attacks and removing the attacks 
from the traffic before the attacks reach the customer's network teaches away from 
"wherein said remotely located computing resource is modified by said unauthorized 
intrusion," as recited by Claim 1. 
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Applicant respectfully submits that Talpade does not teach or suggest, 
.isolating said remotely located computing resource," as recited by Claim 1. 



For example, from line 14 of paragraph 0008 to the end of paragraph 0010, 
Talpade states, 

When the sensor detects an attack, it notifies an analysis engine located in 
the ISP... The analysis engine ... advertises new routing information to the 
border and edge routers ... The new routing information instructs the border 
and edge routers to reroute all DDoS, and non-DDoS traffic... The redirected 
DDoS and non-DDoS traffic from the border and edge routers is automatically 
passed through these filters, removing the DDoS traffic . The non-DDoS 
traffic is forwarded back onto the ISP network and routed towards the 
customer network , (emphasis added) 

Talpade further states, in part, at 0009, "Upon receiving an attack notification and 
based on the customer network being attacked, the analysis engine configures one 
or more filter routers, which are also located in the ISP network... The analysis 
engine configures the filter router(s) to advertise new routing information to the 
border and edge routers using the eBGP session." Further still, Talpade states in 
paragraph 0017 lines 1-3, "In accordance with our invention, the sensors 234/236 
monitor all traffic entering the customer networks 204/206 from the ISP network 
202. .. " (emphasis added). 



Accordingly, Applicant understands Talpade to teach detecting an attack on a 
customer's network before any of the resources in the customer's network are 
affected (see Talpade last sentence of 0002) by monitoring all traffic entering the 
customer network and if an attempted attack is detected then rerouting the traffic to 
the ISP where the attacks are removed from the traffic and the non-attack traffic is 
rerouted back into the customer network (see Talpade line 14 of paragraph 0008 to 
the end of paragraph 0010, 0009 in part, 0017 lines 1-3 quoted herein). Since 
Applicant understands Talpade to teach that the attacks are detected and removed 
before any resources in the customer's network are affected, Applicant respectfully 
submits that Talpade teaches away from "isolating said remotely located computing 
resource," as recited by Claim 1. 

Serial No. 10/678,333 Art Unit 2432 

Examiner: Lemma, Samson B. - 10 - 200310100-1 



Applicant respectfully submits that Maguire does not remedy the deficiencies 

in Talpade because Applicant understands Maguire to also teach away from 

"wherein said remotely located computing resource is modified by said unauthorized 

intrusion," as recited by Claim 1 . For example, Maguire states in the last two lines of 

the abstract, "...preventing network access to confidential data resident on the 

isolated network client." Maguire also states at 0006 lines 7-17, 

...Additionally, many corporate or private networks are coupled 
by one or more servers to the Internet; access to one server through 
the Internet may enable unimpeded access to all intranet data resident 
at every network node. Further, many corporate computers are never 
powered down, even when unattended for extended periods of time 
such as during evening hours, business holidays, and weekends. 
Consequently, proprietary corporate data and other information 
resident on these computers remain vulnerable to unauthorized access 
as long as the computers are receiving power and the network 
connection is established, i.e., continuously. 

Maguire further states at 0025 lines 11-14, "Generally, the risk of an unauthorized 

hack or other security breach is greatest when access device 1 1 1 is continuously 

'on-line' (i.e., 'coupled' with or 'connected' to the network)." Maguire also states at 

0033 lines 4-18, 

...The signal may be generated by a sensor 220 (see FIG. 2B, 
for example) operative to detect the presence of a user at client 112, 
for instance; when the sensor determines that the user is no longer 
present at client 112, the sensor may transmit a signal to isolate 
apparatus representative of the fact that client 112 has been left 
unattended.... Conversely, when the user returns (or a different user 
arrives), the sensor may detect such an arrival and transmit a signal to 
isolation apparatus 210 representative of the fact that client 112 is no 
longer unattended; responsive to such a signal, switch 321 may enable 
communication through interface 320. 

Accordingly, Applicant understands Maguire to teach powering down before a device 
is modified in order to prevent the device from being modified (see Maguire 0006 
lines 7-17, 0025 lines 11-14, 0033 lines 4-18 quoted herein). Applicant respectfully 
submits that powering down before a device is modified in order to prevent the 
device from being modified teaches away from "wherein said remotely located 
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computing resource is modified by said unauthorized intrusion," as recited by Claim 
1. 

Therefore, Applicant respectfully submits that Claim 1 is patentable for at 
least the reasons that Applicant understands both Talpade and Maguire to teach 
away from Claim 1. Applicant respectfully submits that independent Claims 12 and 
23 are patentable for similar reasons. 

Claims 2-5 and 7-11 depend on independent Claim 1. Claims 13-22 depend 
on independent Claim 12. Claims 24-28 and 30-33 depend on independent Claim 
23. These dependent claims include all of the features of their respective 
independent base claims. Therefore, Applicant respectfully submits that these 
dependent claims are patentable for at least the reasons that their respective 
independent base claims are patentable. 
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CONCLUSION 



In light of the above listed amendments and remarks, reconsideration of the 
rejected claims is requested. Based on the arguments and amendments presented 
above, it is respectfully submitted that Claims 1-5, 7-28 and 30-33 overcome the 
rejections of record. For reasons discussed herein, Applicant respectfully requests that 
Claims 1-5, 7-28 and 30-33 be considered be the Examiner. Therefore, allowance of 
Claims 1-5, 7-28 and 30-33 is respectfully solicited. 

Should the Examiner have a question regarding the instant amendment and 
response, the Applicant invites the Examiner to contact the Applicant's undersigned 
representative at the below listed telephone number. 



Respectfully submitted, 
Wagner Blecher LLP 



Dated: 07/18/2011 



/John P. Wagner, Jr./ 



John P. Wagner, Jr. 
Registration No. 35,398 



Address: 



Westridge Business Park 
123 Westridge Drive 
Watsonville, California 95076 USA 



Telephone: 



(408) 377-0500 

(831) 722-2350 Facsimile 
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